Approved For Release 2006/04/19 : CIA-RDP86-00674R000300140001-1 


‘ 
Raxecutive Rogistry 


4 December 1978 


NOTE FOR: DCI 


I think that this is awuseful.renort, 


although I have some problems with Tt nl AVE... 


asked Jack Blake to send copies to the Deputy 
GRP A aE SEN NIE RP IT BB MS ER BP RN OB ct 


Directors for comment... 


‘) 
ee gr unk f F . 
Ag ened 
Attachment: 


Report of the Security ue 
Review Task Force LEE hE 
Jul, Jerre aT LAT 
¢ co incites 
hae STAT 


Bae ay oN 


Approved For Release 2006/04/19 : CIA-RDP86-00674R000300140001-1 


25X1 


Approved For Release 2006/04/19 : CIA- er 00674R000300140001-1 
SE Uint 


9 November 1978 


MEMORANDUM FOR: Director of Security 


FROM: 2 itera 
Chairman, Security Review Task Force 


SUBJECT: Security Review Task Force 


REFFRENCES: {a} Memo for DD/A from the DDCI, dtd. 
18 August 1978, Subject: Request 
for a Security Review and Assessment 


(b) Memo for Chairman, Security Review 
Task Force from Director of Security, 
dtd. 21 August 1978, Subject: Request 
for a Security Review and Assessment 


(c) Memo for DDCI from the DD/A, dtd. 
31 August 1978, Subject: Security 
Review - Interim Report 


1. In accordance with the references, the Security 
Review Task Force has completed its review of the Agency's 
security policies and procedures. The conclusions and recom- 
mendations contained in this summary report are well supported 
by the Task Force investigations. The investigations, as 
indicated in the Interim Report, were conducted by three 
separate segments, each addressing a general topical area, 
i.e., Personnel Security, Physical Security and Information 
Control Security. Remarkably, each segment independently 
reached the conclusions and shared in the principal recommen- 
dations of this report, specifically those pertaining to 
reemphasis of the principle that security in the Agency is 


a command responsibility; Area Security Officers, and Security 
Education. 


Ze The Task Force believes it is essential that all 
responsible recipients of this report comprehend the fact 
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that regardless of the quality of the Agency's Personnel, 
Physical and Information Control Security, there*i's“nooway 
wto.absotutelyipreciudes anothersinc ident of es pionagesby=an, 
“enp Lo xeoadetormined {tour to THEE HreeoatTe, _Put another way, 
we submit that wehendeviaverampLoveeCanhdt be prevent od 
eLrom fot towhn cedvirses DWE WLI 
5. In conclusion, I want to assure you that the Task 


Force members approached their task with professionalism 
and integrity. Fourteen officers were assigned to the three 


segment organization, as follows: 5X4 
Personnel Segnent Physical Segment Information Segment 


Their reports represent, in my opinion, an exceptionally dedi- 
cated effort in response to your direction. 
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SECURITY REVIEW TASK FORCE 
REVIEW OF 
THE CIA SECURITY PROGRAM 


PROLOGUE 


What follows is a review of the current CIA Security 
Program and recommendations which, if approved, will improve 
that program. 

When examining the contents of this report and conten- 
plating the recommendations contained therein, the reader 
should bear in mind that in this Agency security is a command 
responsibility. He should consider the contents of this 
report with the idea in mind that unless there is a constant 
and conscious exercise of that responsibility by all employees, 
and particularly by supervisors and managers at all levels, no 
security program, no matter how well designed, can be success- 
ful. 

There is only one reason for the existence of this orga- 
nization and that is to provide information to the President 
on the intentions and actions of other nations of the world 
which could adversely affect the security of the United States. 


It follows that the sources and methods used to collect that 


information, as well as the information itself, must be protected 


from unauthorized disclosure if it is going to be of any benefit. 
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It also follows that security is paramount in the accomplish- 
ment of the mission. 

wJSupenwisanswandimarygers involved in the accomplishment 
‘of the Agency's mission not only should, but Musdauwconsider 
eV ertywactionathartheymtdakeuineterisnofssecurtty. It does not 
matter what that action is. It could concern the management 
of a clandestine or technical operation. It could be a decision 
to be made on whether to hire a new applicant for staff employ- 
ment. It could be a decision to be made on whether to retain 
the services of an employee who has married an alien. It could 
be a decision to be made on the elimination of Career Security 
Officers in operating components when there is a reduction of 
personnel in the Agency. In any situation, the first question 
the manager has to answer is: What effect will his decision 
have on the secure accomplishment of the mission of the Central 
Intelligence Agency? Unless managers exercise their security 
responsibility consciously, constantly, and in a responsible 
Manner, the results of all their other efforts, no matter how 
well designed and managed, will be worthless. 

The Task Force review included extensive documentary 
reviews, written surveys, and personal interviews within and 
external to the Agency. Several hundred personal interviews 
were conducted by the Task Force members. The Information 


Control Segment alone conducted 140 interviews during its 


. 
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fact finding. The internal investigations touched all 
Directorates, and the cooperation of those individuals con- 
tacted was gratifying. External discussions were carried 
out with representatives of NSA, DIA, DOD, the Department of 
State, and the industrial sector. 
The Agency's Personnel Security program was found to be 
essentially sound, particularly in light of available resources. 
fexbebkevex GhAsinres ti elton MEVOPe Sr ANCE" PRS CeSU PESTA EE Sthex- A 
obostinins gover i vow” Indeed, one might have expected that .con- 

clusion, as the program has been tested and refined for thirty 

years. Yot.,..jthesexestanzot 
_Agencpawasnemddeninchomthesinvesti gators. We believe the erosion 


revthneugkoututhe.. 


Saat 


can be attributed in large part to the dramatic reduction, 
during the past decade, in the number of Career Security Officers 
assigned to operating components, and to the inadequacy of the 
Agency's Security Education Program. We believe a viable 
program restoring Career Security Officers to close proximity 
to the collectors and producers of intelligence is the only way 
to reverse the trend. 

Similarly, the-Tesk@horceifound tieiAgenomtarhhy sical. 
_Security«rogranatovberessentiatryrsound: The problems 
uncovered in this area are not new. The solutions to some 


equipment problems have been delayed by budgetary restrictions. 
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of manragerevandeSUpeLNi sors, £0.cgpLenentrexist tig pobieies? 
25X11 sandaproosduses; [_____ is a good example. 
The Task@Forte fetid “tira iirferiia L261 eon tretpaseappti ed 
to vaniousstiypesraf,natenalstmuaryingesituatiensy4ecuid-only 
der charactenizedvasvineffectual. Again, that might have been 
expected because the Agency, as the rest of the government, 
has been overwhelmed by the information explosion resulting 
from technological advances in intelligence collection experi- 
enced over the past fifteen years. The information control 
recommendations necessarily represent drastic and far-reaching 
changes. We believe that for the first time the magnitude 
and complexity of the information control problem has been 
accurately, albeit not completely, described. The essential 
recommendation in this segment is the aeedmte-reyrgerrconpretely 
the.classifieabionwmndscompartmentationGeiteniacithethes'? 
objtttrivenciwprovidi ns extraordinary protectionxtasonty. that . 
~<rfermatLonwhrehutz ulyedsyexce pelrondbhy*sensxti ver 
This report represents a distillation of the findings 
of the Security Review Task Force. The recommendations are 
those which are essential to movement toward much-needed 
reforms in security practices and procedures throughout CIA 


and, where appropriate, the Intelligence Comnunity. 
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ACCOUNTABILITY AND SPOT INVENTORIES 
Current Procedures: 

An underlying factor in the three basic questions probed 
by the Task Force, as described at the beginning of the docu- 
ment control section, is the serious lack of inventories of 
accountable material. Within CIA, DIA, and NSA the only 
material afforded periodic inventory is TOP SECRET non-compart- 
mented and Restricted Data. Among these agencies, the inven- 
tories vary from the first agency-wide TS non-compartmented 
inventory in CIA, to regular, semiannual inventories at NSA. 

The minute amount of Restricted Data furnished CIA allows 

one control officer to maintain accountability on a day-to-day 
basis. This is an example of the axiom of inverse relationship ( 
between volume and control at its best. 

An example of this axiom at its worst is found in the 
control and accountability of Sensitive Compartmented Information 
(SCI), a generic term for all categories of formally compart- 
mented intelligence, including SI, TK, and BYE. The three 
categories frequently receive community-wide dissemination based 
upon predetermined dissemination lists, accounted for only 
by document copy number. Accompanying document receipts 
forwarded to recipients by NFAC/PPG are executed only 85 epeene 
of the time. Based upon 1977 figures for NFAC/PPG, the receipt 
of some 13,000 TS/SCI documents was never verified by the 


intended recipient. 
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